Hoffmann-La Roche is leveraging the power of eBPF, Cilium, and Envoy to solve complex real-world DNS challenges in highly protected environments like laboratories and hospitals.

Going beyond basic connectivity, we'll dive into our most recent edge networking hurdle: customer DNS resolvers explicitly block public domain resolution, forcing all external lookups to occur exclusively through their HTTP forward proxies, and how we overcame this constraint by leveraging Cilium's advanced network policy traffic redirect capabilities, combined with some advanced CoreDNS filtering.

We will conclude with a live, high-wire demonstration. If the demo gods are on our side, you'll see these advanced Cilium features put into practice to instantly and reliably solve the DNS-over-Proxy challenge.